GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2025-38305 (GCVE-0-2025-38305)

Vulnerability from cvelistv5 – Published: 2025-07-10 07:42 – Updated: 2026-05-11 21:25
VLAI
Title
ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use()
Summary
In the Linux kernel, the following vulnerability has been resolved: ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() There is no disagreement that we should check both ptp->is_virtual_clock and ptp->n_vclocks to check if the ptp virtual clock is in use. However, when we acquire ptp->n_vclocks_mux to read ptp->n_vclocks in ptp_vclock_in_use(), we observe a recursive lock in the call trace starting from n_vclocks_store(). ============================================ WARNING: possible recursive locking detected 6.15.0-rc6 #1 Not tainted -------------------------------------------- syz.0.1540/13807 is trying to acquire lock: ffff888035a24868 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: ptp_vclock_in_use drivers/ptp/ptp_private.h:103 [inline] ffff888035a24868 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: ptp_clock_unregister+0x21/0x250 drivers/ptp/ptp_clock.c:415 but task is already holding lock: ffff888030704868 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: n_vclocks_store+0xf1/0x6d0 drivers/ptp/ptp_sysfs.c:215 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&ptp->n_vclocks_mux); lock(&ptp->n_vclocks_mux); *** DEADLOCK *** .... ============================================ The best way to solve this is to remove the logic that checks ptp->n_vclocks in ptp_vclock_in_use(). The reason why this is appropriate is that any path that uses ptp->n_vclocks must unconditionally check if ptp->n_vclocks is greater than 0 before unregistering vclocks, and all functions are already written this way. And in the function that uses ptp->n_vclocks, we already get ptp->n_vclocks_mux before unregistering vclocks. Therefore, we need to remove the redundant check for ptp->n_vclocks in ptp_vclock_in_use() to prevent recursive locking.
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 73f37068d540eba5f93ba3a0019bf479d35ebd76 , < 5d217e7031a5c06d366580fc6ddbf43527b780d4 (git)
Affected: 73f37068d540eba5f93ba3a0019bf479d35ebd76 , < b1b73c452331451020be3bf4b014901015ae6663 (git)
Affected: 73f37068d540eba5f93ba3a0019bf479d35ebd76 , < 259119595227fd20f6aa29d85abe086b6fdd9eb1 (git)
Affected: 73f37068d540eba5f93ba3a0019bf479d35ebd76 , < b93e6fef4eda48e17d9c642b9abad98a066fd4a3 (git)
Affected: 73f37068d540eba5f93ba3a0019bf479d35ebd76 , < ef8fc007c28a30a4c0d90bf755e0f343d99bb392 (git)
Affected: 73f37068d540eba5f93ba3a0019bf479d35ebd76 , < 87f7ce260a3c838b49e1dc1ceedf1006795157a2 (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.14
Unaffected: 0 , < 5.14 (semver)
Unaffected: 5.15.186 , ≤ 5.15.* (semver)
Unaffected: 6.1.142 , ≤ 6.1.* (semver)
Unaffected: 6.6.94 , ≤ 6.6.* (semver)
Unaffected: 6.12.34 , ≤ 6.12.* (semver)
Unaffected: 6.15.3 , ≤ 6.15.* (semver)
Unaffected: 6.16 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T17:36:22.602Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/ptp/ptp_private.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "5d217e7031a5c06d366580fc6ddbf43527b780d4",
              "status": "affected",
              "version": "73f37068d540eba5f93ba3a0019bf479d35ebd76",
              "versionType": "git"
            },
            {
              "lessThan": "b1b73c452331451020be3bf4b014901015ae6663",
              "status": "affected",
              "version": "73f37068d540eba5f93ba3a0019bf479d35ebd76",
              "versionType": "git"
            },
            {
              "lessThan": "259119595227fd20f6aa29d85abe086b6fdd9eb1",
              "status": "affected",
              "version": "73f37068d540eba5f93ba3a0019bf479d35ebd76",
              "versionType": "git"
            },
            {
              "lessThan": "b93e6fef4eda48e17d9c642b9abad98a066fd4a3",
              "status": "affected",
              "version": "73f37068d540eba5f93ba3a0019bf479d35ebd76",
              "versionType": "git"
            },
            {
              "lessThan": "ef8fc007c28a30a4c0d90bf755e0f343d99bb392",
              "status": "affected",
              "version": "73f37068d540eba5f93ba3a0019bf479d35ebd76",
              "versionType": "git"
            },
            {
              "lessThan": "87f7ce260a3c838b49e1dc1ceedf1006795157a2",
              "status": "affected",
              "version": "73f37068d540eba5f93ba3a0019bf479d35ebd76",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/ptp/ptp_private.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.14"
            },
            {
              "lessThan": "5.14",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.186",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.142",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.94",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.34",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.15.*",
              "status": "unaffected",
              "version": "6.15.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.16",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.186",
                  "versionStartIncluding": "5.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.142",
                  "versionStartIncluding": "5.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.94",
                  "versionStartIncluding": "5.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.34",
                  "versionStartIncluding": "5.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15.3",
                  "versionStartIncluding": "5.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.16",
                  "versionStartIncluding": "5.14",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nptp: remove ptp-\u003en_vclocks check logic in ptp_vclock_in_use()\n\nThere is no disagreement that we should check both ptp-\u003eis_virtual_clock\nand ptp-\u003en_vclocks to check if the ptp virtual clock is in use.\n\nHowever, when we acquire ptp-\u003en_vclocks_mux to read ptp-\u003en_vclocks in\nptp_vclock_in_use(), we observe a recursive lock in the call trace\nstarting from n_vclocks_store().\n\n============================================\nWARNING: possible recursive locking detected\n6.15.0-rc6 #1 Not tainted\n--------------------------------------------\nsyz.0.1540/13807 is trying to acquire lock:\nffff888035a24868 (\u0026ptp-\u003en_vclocks_mux){+.+.}-{4:4}, at:\n ptp_vclock_in_use drivers/ptp/ptp_private.h:103 [inline]\nffff888035a24868 (\u0026ptp-\u003en_vclocks_mux){+.+.}-{4:4}, at:\n ptp_clock_unregister+0x21/0x250 drivers/ptp/ptp_clock.c:415\n\nbut task is already holding lock:\nffff888030704868 (\u0026ptp-\u003en_vclocks_mux){+.+.}-{4:4}, at:\n n_vclocks_store+0xf1/0x6d0 drivers/ptp/ptp_sysfs.c:215\n\nother info that might help us debug this:\n Possible unsafe locking scenario:\n\n       CPU0\n       ----\n  lock(\u0026ptp-\u003en_vclocks_mux);\n  lock(\u0026ptp-\u003en_vclocks_mux);\n\n *** DEADLOCK ***\n....\n============================================\n\nThe best way to solve this is to remove the logic that checks\nptp-\u003en_vclocks in ptp_vclock_in_use().\n\nThe reason why this is appropriate is that any path that uses\nptp-\u003en_vclocks must unconditionally check if ptp-\u003en_vclocks is greater\nthan 0 before unregistering vclocks, and all functions are already\nwritten this way. And in the function that uses ptp-\u003en_vclocks, we\nalready get ptp-\u003en_vclocks_mux before unregistering vclocks.\n\nTherefore, we need to remove the redundant check for ptp-\u003en_vclocks in\nptp_vclock_in_use() to prevent recursive locking."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T21:25:24.378Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/5d217e7031a5c06d366580fc6ddbf43527b780d4"
        },
        {
          "url": "https://git.kernel.org/stable/c/b1b73c452331451020be3bf4b014901015ae6663"
        },
        {
          "url": "https://git.kernel.org/stable/c/259119595227fd20f6aa29d85abe086b6fdd9eb1"
        },
        {
          "url": "https://git.kernel.org/stable/c/b93e6fef4eda48e17d9c642b9abad98a066fd4a3"
        },
        {
          "url": "https://git.kernel.org/stable/c/ef8fc007c28a30a4c0d90bf755e0f343d99bb392"
        },
        {
          "url": "https://git.kernel.org/stable/c/87f7ce260a3c838b49e1dc1ceedf1006795157a2"
        }
      ],
      "title": "ptp: remove ptp-\u003en_vclocks check logic in ptp_vclock_in_use()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-38305",
    "datePublished": "2025-07-10T07:42:16.127Z",
    "dateReserved": "2025-04-16T04:51:24.002Z",
    "dateUpdated": "2026-05-11T21:25:24.378Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-38305",
      "date": "2026-09-16",
      "epss": "0.00156",
      "percentile": "0.05168"
    },
    "microsoft_vex": {
      "current_release_date": "2026-02-18T15:05:40.000Z",
      "cve": "CVE-2025-38305",
      "id": "msrc_CVE-2025-38305",
      "initial_release_date": "2025-07-02T00:00:00.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "ptp: remove ptp-\u003en_vclocks check logic in ptp_vclock_in_use()",
      "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-38305.json",
      "version": "2"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-38305\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-07-10T08:15:29.320\",\"lastModified\":\"2026-06-17T09:16:35.237\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nptp: remove ptp-\u003en_vclocks check logic in ptp_vclock_in_use()\\n\\nThere is no disagreement that we should check both ptp-\u003eis_virtual_clock\\nand ptp-\u003en_vclocks to check if the ptp virtual clock is in use.\\n\\nHowever, when we acquire ptp-\u003en_vclocks_mux to read ptp-\u003en_vclocks in\\nptp_vclock_in_use(), we observe a recursive lock in the call trace\\nstarting from n_vclocks_store().\\n\\n============================================\\nWARNING: possible recursive locking detected\\n6.15.0-rc6 #1 Not tainted\\n--------------------------------------------\\nsyz.0.1540/13807 is trying to acquire lock:\\nffff888035a24868 (\u0026ptp-\u003en_vclocks_mux){+.+.}-{4:4}, at:\\n ptp_vclock_in_use drivers/ptp/ptp_private.h:103 [inline]\\nffff888035a24868 (\u0026ptp-\u003en_vclocks_mux){+.+.}-{4:4}, at:\\n ptp_clock_unregister+0x21/0x250 drivers/ptp/ptp_clock.c:415\\n\\nbut task is already holding lock:\\nffff888030704868 (\u0026ptp-\u003en_vclocks_mux){+.+.}-{4:4}, at:\\n n_vclocks_store+0xf1/0x6d0 drivers/ptp/ptp_sysfs.c:215\\n\\nother info that might help us debug this:\\n Possible unsafe locking scenario:\\n\\n       CPU0\\n       ----\\n  lock(\u0026ptp-\u003en_vclocks_mux);\\n  lock(\u0026ptp-\u003en_vclocks_mux);\\n\\n *** DEADLOCK ***\\n....\\n============================================\\n\\nThe best way to solve this is to remove the logic that checks\\nptp-\u003en_vclocks in ptp_vclock_in_use().\\n\\nThe reason why this is appropriate is that any path that uses\\nptp-\u003en_vclocks must unconditionally check if ptp-\u003en_vclocks is greater\\nthan 0 before unregistering vclocks, and all functions are already\\nwritten this way. And in the function that uses ptp-\u003en_vclocks, we\\nalready get ptp-\u003en_vclocks_mux before unregistering vclocks.\\n\\nTherefore, we need to remove the redundant check for ptp-\u003en_vclocks in\\nptp_vclock_in_use() to prevent recursive locking.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ptp: eliminar la l\u00f3gica de comprobaci\u00f3n de ptp-\u0026gt;n_vclocks en ptp_vclock_in_use(). No hay desacuerdo en que debemos comprobar tanto ptp-\u0026gt;is_virtual_clock como ptp-\u0026gt;n_vclocks para comprobar si el reloj virtual ptp est\u00e1 en uso. Sin embargo, al adquirir ptp-\u0026gt;n_vclocks_mux para leer ptp-\u0026gt;n_vclocks en ptp_vclock_in_use(), observamos un bloqueo recursivo en el seguimiento de llamadas a partir de n_vclocks_store(). ============================================== ADVERTENCIA: posible bloqueo recursivo detectado 6.15.0-rc6 #1 No contaminado -------------------------------------------- syz.0.1540/13807 est\u00e1 intentando adquirir el bloqueo: ffff888035a24868 (\u0026amp;ptp-\u0026gt;n_vclocks_mux){+.+.}-{4:4}, en: ptp_vclock_in_use drivers/ptp/ptp_private.h:103 [en l\u00ednea] ffff888035a24868 (\u0026amp;ptp-\u0026gt;n_vclocks_mux){+.+.}-{4:4}, en: ptp_clock_unregister+0x21/0x250 drivers/ptp/ptp_clock.c:415 pero la tarea ya tiene el bloqueo: ffff888030704868 (\u0026amp;ptp-\u0026gt;n_vclocks_mux){+.+.}-{4:4}, en: n_vclocks_store+0xf1/0x6d0 drivers/ptp/ptp_sysfs.c:215 otra informaci\u00f3n que podr\u00eda ayudarnos a depurar esto: Posible escenario de bloqueo inseguro: CPU0 ---- lock(\u0026amp;ptp-\u0026gt;n_vclocks_mux); lock(\u0026amp;ptp-\u0026gt;n_vclocks_mux); *** BLOQUEO INTERMEDIO *** .... ============================================== La mejor manera de resolver esto es eliminar la l\u00f3gica que comprueba ptp-\u0026gt;n_vclocks en ptp_vclock_in_use(). Esto es apropiado porque cualquier ruta que use ptp-\u0026gt;n_vclocks debe comprobar incondicionalmente si ptp-\u0026gt;n_vclocks es mayor que 0 antes de anular el registro de vclocks, y todas las funciones ya est\u00e1n escritas de esta manera. En la funci\u00f3n que usa ptp-\u0026gt;n_vclocks, ya obtenemos ptp-\u0026gt;n_vclocks_mux antes de anular el registro de vclocks. Por lo tanto, necesitamos eliminar la comprobaci\u00f3n redundante de ptp-\u0026gt;n_vclocks en ptp_vclock_in_use() para evitar el bloqueo recursivo.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/ptp/ptp_private.h\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"73f37068d540eba5f93ba3a0019bf479d35ebd76\",\"lessThan\":\"5d217e7031a5c06d366580fc6ddbf43527b780d4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"73f37068d540eba5f93ba3a0019bf479d35ebd76\",\"lessThan\":\"b1b73c452331451020be3bf4b014901015ae6663\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"73f37068d540eba5f93ba3a0019bf479d35ebd76\",\"lessThan\":\"259119595227fd20f6aa29d85abe086b6fdd9eb1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"73f37068d540eba5f93ba3a0019bf479d35ebd76\",\"lessThan\":\"b93e6fef4eda48e17d9c642b9abad98a066fd4a3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"73f37068d540eba5f93ba3a0019bf479d35ebd76\",\"lessThan\":\"ef8fc007c28a30a4c0d90bf755e0f343d99bb392\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"73f37068d540eba5f93ba3a0019bf479d35ebd76\",\"lessThan\":\"87f7ce260a3c838b49e1dc1ceedf1006795157a2\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/ptp/ptp_private.h\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.14\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.14\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.186\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.142\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.94\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.34\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.15.3\",\"lessThanOrEqual\":\"6.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.16\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.14.1\",\"versionEndExcluding\":\"5.15.186\",\"matchCriteriaId\":\"7F369340-2B76-438A-A8D2-7A0F994DC4AC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.142\",\"matchCriteriaId\":\"459B4E94-FE0E-434D-B782-95E3A5FFC6B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.94\",\"matchCriteriaId\":\"304E3F01-7D7A-4908-994E-7F95C5C00B06\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.34\",\"matchCriteriaId\":\"4FFA54AA-CDFE-4591-BD07-72813D0948F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.15.3\",\"matchCriteriaId\":\"0541C761-BD5E-4C1A-8432-83B375D7EB92\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.14:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A05198E-F8FA-4517-8D0E-8C95066AED38\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.14:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"23B9E5C6-FAB5-4A02-9E39-27C8787B0991\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.14:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"D185CF67-7E4A-4154-93DB-CE379C67DB56\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.14:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1DA0AF6-02F4-47C7-A318-8C006ED0C665\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.14:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"49DD30B1-8C99-4C38-A66B-CAB3827BEE8A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.14:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"15013998-4AF0-4CDC-AB13-829ECD8A8E66\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.14:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"376A25CF-C05B-48F1-99B1-8FB0314A8E06\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D4894DB-CCFE-4602-B1BF-3960B2E19A01\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/259119595227fd20f6aa29d85abe086b6fdd9eb1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5d217e7031a5c06d366580fc6ddbf43527b780d4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/87f7ce260a3c838b49e1dc1ceedf1006795157a2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b1b73c452331451020be3bf4b014901015ae6663\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b93e6fef4eda48e17d9c642b9abad98a066fd4a3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ef8fc007c28a30a4c0d90bf755e0f343d99bb392\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-30T01:03:20+00:00",
      "cve": "CVE-2025-38305",
      "id": "CVE-2025-38305",
      "initial_release_date": "2025-07-10T00:00:00+00:00",
      "product_status:known_affected": "198",
      "product_status:known_not_affected": "76",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Linux kernel (PTP): Denial of Service due to recursive locking in virtual clock handling",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-38305.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-02T01:16:32Z",
      "cve": "CVE-2025-38305",
      "id": "CVE-2025-38305",
      "initial_release_date": "2025-07-11T23:22:35Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "537",
      "product_status:known_not_affected": "299",
      "product_status:recommended": "472",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2025-38305",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-38305.json",
      "version": "41"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.